Comments by "" (@Green__one) on "Computerphile" channel.

This was my thought as well. Sure it's great for the X.org team to fix their part of this, but the real vulnerability isn't on their side, but on the passwd side. X.org is not the only program that ever runs with setuid, and it would seem that better checking of shadow data would fix the issue for not just X.org exploits, but for any program with a similarly poorly thought out structure. (not that X.org shouldn't fix this, the ability to write arbitrary data, or even log entries, to any random place could be quite destructive even if it didn't result in root access, it's just that a fix should be implemented on both ends here)
6